[HelloNurse]

That's why there are query parameters (see https://www.sqlite.org/lang_expr.html#varparam for the comprehensive SQLite implementation) and automatic escaping. Not to mention tests and code reviews.

[robertlagrant]

Yes, those are other ways to try and solve this problem.